Email: 252550 Autolearn: 0 AvgScore: 4.57 AvgScanTime: 1.38 sec Spam: 85715 Autolearn: 0 AvgScore: 13.60 AvgScanTime: 1.42 sec Ham: 166835 Autolearn: 0 AvgScore: -0.06 AvgScanTime: 1.35 sec Time Spent Running SA: 96.48 hours Time Spent Processing Spam: 33.79 hours Time Spent Processing Ham: 62.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 82099 87.61 95.78 83.42 2 DKIM_SIGNED 79119 82.29 92.30 77.14 3 XM_DK_Pass 76168 80.38 88.86 76.02 4 DKIM_VALID 75657 79.72 88.27 75.33 5 XM_B_Unicode 72971 75.18 85.13 70.06 6 RELAYCOUNTRY_US 72630 82.49 84.73 81.34 7 DCC_CHECK 68165 60.56 79.53 50.81 8 XMListUnsubscribeExists 63181 59.62 73.71 52.37 9 DKIM_VALID_AU 62081 67.13 72.43 64.40 10 XM_B_SpammyWords 59573 54.19 69.50 46.32 11 XM_B_Unicode3 47197 49.01 55.06 45.91 12 LOC_TINY_FONT_1 43372 39.44 50.60 33.71 13 RCVD_IN_MSPIKE_H2 37580 40.30 43.84 38.48 14 XM_DK_Undo_02 36654 17.85 42.76 5.05 15 HTML_FONT_LOW_CONTRAST 34487 34.21 40.23 31.11 16 XM_B_SpammyWords2 32040 26.61 37.38 21.08 17 BAYES_50 31535 52.97 36.79 61.29 18 BAYES_99 29286 14.29 34.17 4.08 19 T_KAM_HTML_FONT_INVALID 27621 24.41 32.22 20.39 20 FVGT_m_MULTI_ODD 26921 27.49 31.41 25.48 21 TR_XM_DKIM_Undo 26641 11.95 31.08 2.12 22 DKIM_VALID_EF 24167 28.54 28.19 28.72 23 MIME_HTML_ONLY 23801 24.62 27.77 23.00 24 BAYES_999 22525 11.00 26.28 3.15 25 TR_DCC_Bayes_99 21762 9.66 25.39 1.57 26 XM_Multi_Part_URI 18089 18.08 21.10 16.53 27 TR_XM_DK_Unsub 17210 15.78 20.08 13.57 28 DCC_CHECK_NEGATIVE 17126 39.26 19.98 49.16 29 XMSubLong 16836 21.93 19.64 23.11 30 T_TM2_M_HEADER_IN_MSG 16759 21.44 19.55 22.41 31 TR_MAX_INTL_RELAY 14290 9.68 16.67 6.09 32 UNPARSEABLE_RELAY 13591 14.61 15.86 13.97 33 RELAYCOUNTRY_META 13530 7.41 15.78 3.11 34 XM_B_Unsub 13133 12.26 15.32 10.69 35 TR_XM_BayesUnsub 12717 10.51 14.84 8.29 36 XM_B_SpammyWords3 12193 8.63 14.23 5.76 37 TR_XM_SpammyWords2 10353 4.43 12.08 0.50 38 TR_XM_SpammyRelay 9544 4.91 11.13 1.71 39 BAYES_80 9120 6.11 10.64 3.79 40 BOTNET_IPINHOSTNAME 8396 5.56 9.80 3.39 41 LOTS_OF_MONEY 8332 7.00 9.72 5.60 42 FSL_BULK_SIG 8080 10.20 9.43 10.59 43 BOTNET 7944 3.87 9.27 1.09 44 TR_XM_UnparsRelay 7586 4.11 8.85 1.67 45 BAYES_60 7432 7.79 8.67 7.34 46 TR_XM_SpammyWords4 7243 5.30 8.45 3.69 47 HTML_IMAGE_RATIO_02 7240 6.50 8.45 5.49 48 XM_Evil_Numbers_Gen 7028 9.61 8.20 10.33 49 RCVD_IN_BL_SPAMCOP_NET 6763 3.06 7.89 0.57 50 XM_Body_Dirty_Words 6342 4.26 7.40 2.64 51 RELAYCOUNTRY_CA 6199 3.14 7.23 1.04 52 XM_UncommonTLD01 5872 6.03 6.85 5.61 53 XM_B_Phish_Phrases 5832 5.33 6.80 4.57 54 MPART_ALT_DIFF 5353 5.19 6.25 4.65 55 XMSubMetaSx_00 5310 4.58 6.19 3.74 56 LotsOfNums_01 5182 6.41 6.05 6.60 57 BAYES_95 4918 3.47 5.74 2.30 58 TR_XM_PhishingBody 4688 2.98 5.47 1.71 59 RCVD_IN_VALIDITY_RPBL 4587 1.99 5.35 0.26 60 XMStrtUSub 4541 6.19 5.30 6.64 61 XM_H_Long_From01 4497 5.83 5.25 6.12 62 XMSexyCombo_05 4347 2.99 5.07 1.92 63 XM_H_GMP 4330 6.23 5.05 6.84 64 MIME_HTML_MOSTLY 4263 3.52 4.97 2.78 65 TR_XM_SPAMCOP 4227 1.87 4.93 0.30 66 UNTRUSTED_Relay 4208 2.74 4.91 1.62 67 HTML_IMAGE_RATIO_04 4113 4.71 4.80 4.66 68 T_XMDrugObfuBody_14 4056 3.30 4.73 2.56 69 XM_B_Investor 4009 2.52 4.68 1.42 70 XM_B_PhoneNumber 3568 5.78 4.16 6.61 71 DKIM_INVALID 3462 2.57 4.04 1.81 72 HTML_IMAGE_RATIO_06 3421 3.21 3.99 2.81 73 TooManyTo_001 3230 5.58 3.77 6.52 74 XM_CamelCaseFrm001 3059 3.28 3.57 3.14 75 MIME_HTML_ONLY_MULTI 3000 2.94 3.50 2.65 76 TM2_M_VERY_LONG_WORD 2866 2.16 3.34 1.56 77 RCVD_IN_VALIDITY_SAFE 2774 5.15 3.24 6.13 78 T_XMHurry_00 2746 1.58 3.20 0.75 79 HTML_IMAGE_RATIO_08 2704 2.68 3.15 2.44 80 XM_B_SpammyTLD 2694 3.19 3.14 3.22 81 XMPhish30 2492 1.50 2.91 0.78 82 RCVD_IN_MSPIKE_H3 2447 4.01 2.85 4.60 83 RCVD_IN_MSPIKE_WL 2447 4.01 2.85 4.60 84 DIET_1 2418 1.30 2.82 0.52 85 TR_XM_SpammyWords5 2392 1.98 2.79 1.57 86 XM_OfRef6 2357 1.48 2.75 0.83 87 RCVD_IN_VALIDITY_CERTIFIED 2330 4.18 2.72 4.94 88 XMDiploma_00 2321 1.82 2.71 1.36 89 TM2_M_URI_OPT_OUT 2317 2.08 2.70 1.76 90 T_XMDrugObfuBody_08 2220 1.77 2.59 1.34 91 XMBody_17 2192 1.29 2.56 0.64 92 RELAYCOUNTRY_AU 2148 1.18 2.51 0.50 93 XM_SPF_SoftFail 2139 1.43 2.50 0.88 94 FROM_EXCESS_BASE64 2127 2.59 2.48 2.65 95 T_XMDrugObfuBody_00 2073 1.23 2.42 0.63 96 TR_XM_NoHeaderRelay 2016 0.97 2.35 0.25 97 XM_UB50 1998 1.34 2.33 0.83 98 XMNumbers 1903 3.42 2.22 4.04 99 USER_IN_DEF_DKIM_WL 1888 12.89 2.20 18.38 100 SpammyFromTLD_02 1859 0.84 2.17 0.15 101 XMBrknScrpt_02 1844 1.34 2.15 0.93 102 XM_URI_RBL 1770 1.15 2.06 0.67 103 MAILING_LIST_MULTI 1767 2.17 2.06 2.23 104 XM_B_SpammyWords4 1761 1.52 2.05 1.24 105 XM_B_URI_Unicode 1753 1.74 2.05 1.58 106 T_FILL_THIS_FORM_SHORT 1685 1.13 1.97 0.71 107 SpammyFromTLD_01 1653 1.30 1.93 0.98 108 T_TooManySym_01 1639 5.66 1.91 7.59 109 SUBJ_ALL_CAPS 1511 1.45 1.76 1.28 110 TR_Mismatch_TLD_02 1488 0.62 1.74 0.05 111 XM_B_Unsub2 1452 1.33 1.69 1.14 112 SHOPIFY_IMG_NOT_RCVD_SFY 1441 0.85 1.68 0.43 113 HTML_TAG_BALANCE_BODY 1428 1.16 1.67 0.89 114 TR_XM_INV_DKIM 1420 0.73 1.66 0.25 115 TR_XM_PHPForged 1405 0.69 1.64 0.21 116 XM_B_COPY_HTML 1395 1.19 1.63 0.97 117 T_REMOTE_IMAGE 1390 3.26 1.62 4.10 118 TR_XM_PHPDW 1389 0.69 1.62 0.20 119 TR_XM_FormFill2 1381 0.69 1.61 0.22 120 XM_H_PHPOS 1365 0.67 1.59 0.19 121 MIME_QP_LONG_LINE 1334 2.60 1.56 3.13 122 HTML_FONT_TINY_NORDNS 1328 0.56 1.55 0.05 123 RCVD_IN_PSBL 1326 0.63 1.55 0.15 124 XMSubMetaI_00 1311 0.74 1.53 0.34 125 URI_HEX 1303 1.48 1.52 1.46 126 LongTLD 1247 0.65 1.45 0.24 127 ALL_TRUSTED 1222 10.79 1.43 15.60 128 HTML_MIME_NO_HTML_TAG 1219 1.87 1.42 2.10 129 BAYES_40 1210 3.79 1.41 5.01 130 XMStockSpam_06 1205 1.54 1.41 1.61 131 TR_LOTS_OF_MONEY3 1202 0.69 1.40 0.32 132 XM_B_REG_HTML 1179 0.61 1.38 0.22 133 XMGenDplmaNmb 1150 0.86 1.34 0.61 134 XM_DK_Undo_01 1147 1.48 1.34 1.56 135 HTTPS_HTTP_MISMATCH 1135 0.80 1.32 0.53 136 KHOP_HELO_FCRDNS 1125 1.13 1.31 1.04 137 T_STY_INVIS_DIRECT 1123 0.99 1.31 0.82 138 URI_NOVOWEL 1115 1.56 1.30 1.69 139 XM_SendGrid 1101 1.23 1.28 1.21 140 XMSlimDrugH 1079 0.87 1.26 0.67 141 XMReplyNow 1077 0.55 1.26 0.18 142 RCVD_IN_XBL 1062 0.44 1.24 0.02 143 BOTNET_NORDNS 1051 0.42 1.23 0.01 144 TR_Symld_Words 1051 1.27 1.23 1.30 145 TM2_M_OBFU_COMMENT 1050 0.89 1.22 0.72 146 MPART_ALT_DIFF_COUNT 1024 0.79 1.19 0.58 147 TR_XM_Spammywords 1010 0.50 1.18 0.15 148 XM_S_SpammyWords 1010 0.50 1.18 0.15 149 XM_DIRTYINTL 962 0.44 1.12 0.09 150 RDNS_DYNAMIC 959 0.66 1.12 0.42 151 XM_H_Long_From02 942 0.80 1.10 0.64 152 BAYES_20 941 2.64 1.10 3.43 153 PDS_RDNS_DYNAMIC_FP 930 0.51 1.08 0.21 154 XM_H_Undi_Recip 886 0.44 1.03 0.14 155 TVD_RCVD_IP 886 1.02 1.03 1.01 156 DKIM_ADSP_NXDOMAIN 884 0.69 1.03 0.52 157 J_POPCORN_WO_D 846 0.51 0.99 0.26 158 XM_B_Phish66 834 0.53 0.97 0.30 159 XM_H_PHPMailer 819 0.86 0.96 0.81 160 XM_OfRef7 816 0.46 0.95 0.21 161 DKIM_ADSP_CUSTOM_MED 810 0.99 0.94 1.01 162 TM2_M_A_HREF_HREF 809 0.46 0.94 0.21 163 XMNoVowels 794 0.78 0.93 0.71 164 XMSexyCombo_01 787 0.40 0.92 0.14 165 RCVD_IN_PBL 785 0.70 0.92 0.60 166 URI_TRY_3LD 784 0.70 0.91 0.59 167 XM_ProductURIs 768 0.74 0.90 0.66 168 XM_HighProb1 760 0.31 0.89 0.02 169 TR_Mismatch_TLD_01 759 0.44 0.89 0.21 170 XMSubMetaD_03 758 0.41 0.88 0.16 171 TR_XM_RelayPhish 740 0.33 0.86 0.06 172 NO_DNS_FOR_FROM 732 0.61 0.85 0.48 173 TR_XM_DK_SendGrid 731 0.86 0.85 0.86 174 XMSubMetaI_01 731 0.30 0.85 0.02 175 TR_XM_MaxWHORU 724 0.53 0.84 0.37 176 PLING_QUERY 724 0.55 0.84 0.40 177 HTML_IMAGE_ONLY_20 724 0.52 0.84 0.35 178 XM_B_SEO 721 0.47 0.84 0.28 179 TR_MetaPhish_Combo_01 719 0.70 0.84 0.64 180 HOSTED_IMG_MULTI_PUB_01 712 0.30 0.83 0.03 181 FONT_INVIS_LONG_LINE 707 0.37 0.82 0.14 182 RCVD_IN_SBL_CSS 704 0.29 0.82 0.02 183 XM_UB99 698 0.28 0.81 0.00 184 TR_XM_FormFill 691 0.28 0.81 0.01 185 XM_B_DNDMA 685 0.84 0.80 0.87 186 RELAYCOUNTRY_FR 677 0.40 0.79 0.20 187 XM_GoogleGroups 675 0.96 0.79 1.06 188 XMBdyGiftCard01 675 1.63 0.79 2.07 189 NML_ADSP_CUSTOM_MED 673 0.75 0.79 0.73 190 MIME_CHARSET_FARAWAY 670 0.58 0.78 0.48 191 MultiRelay_CC 666 0.34 0.78 0.11 192 FORGED_GMAIL_RCVD 652 0.67 0.76 0.63 193 RELAYCOUNTRY_GB 640 0.43 0.75 0.27 194 HELO_DYNAMIC_SPLIT_IP 621 0.25 0.72 0.01 195 XMPhish08 617 0.43 0.72 0.28 196 XM_Body_Dirty_Words_01 607 0.27 0.71 0.04 197 TR_XM_SEO4 601 0.30 0.70 0.10 198 TR_XM_Base64_L1 596 0.32 0.70 0.12 199 BOUNCE_MESSAGE 584 2.47 0.68 3.39 200 ANY_BOUNCE_MESSAGE 584 2.47 0.68 3.39 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139171 87.61 95.78 83.42 2 RELAYCOUNTRY_US 135711 82.49 84.73 81.34 3 DKIM_SIGNED 128695 82.29 92.30 77.14 4 XM_DK_Pass 126829 80.38 88.86 76.02 5 DKIM_VALID 125675 79.72 88.27 75.33 6 XM_B_Unicode 116888 75.18 85.13 70.06 7 DKIM_VALID_AU 107444 67.13 72.43 64.40 8 BAYES_50 102246 52.97 36.79 61.29 9 XMListUnsubscribeExists 87378 59.62 73.71 52.37 10 DCC_CHECK 84775 60.56 79.53 50.81 11 DCC_CHECK_NEGATIVE 82014 39.26 19.98 49.16 12 XM_B_SpammyWords 77279 54.19 69.50 46.32 13 XM_B_Unicode3 76586 49.01 55.06 45.91 14 RCVD_IN_MSPIKE_H2 64197 40.30 43.84 38.48 15 LOC_TINY_FONT_1 56237 39.44 50.60 33.71 16 HTML_FONT_LOW_CONTRAST 51908 34.21 40.23 31.11 17 DKIM_VALID_EF 47915 28.54 28.19 28.72 18 FVGT_m_MULTI_ODD 42505 27.49 31.41 25.48 19 XMSubLong 38549 21.93 19.64 23.11 20 MIME_HTML_ONLY 38368 24.62 27.77 23.00 21 T_TM2_M_HEADER_IN_MSG 37395 21.44 19.55 22.41 22 XM_B_SpammyWords2 35166 26.61 37.38 21.08 23 T_KAM_HTML_FONT_INVALID 34022 24.41 32.22 20.39 24 USER_IN_DEF_DKIM_WL 30665 12.89 2.20 18.38 25 XM_Multi_Part_URI 27579 18.08 21.10 16.53 26 ALL_TRUSTED 26020 10.79 1.43 15.60 27 UNPARSEABLE_RELAY 23306 14.61 15.86 13.97 28 TR_XM_DK_Unsub 22642 15.78 20.08 13.57 29 BAYES_00 18155 7.35 0.46 10.88 30 XM_B_Unsub 17839 12.26 15.32 10.69 31 FSL_BULK_SIG 17672 10.20 9.43 10.59 32 XM_Evil_Numbers_Gen 17230 9.61 8.20 10.33 33 XM_DKIMWhitelistDomains 16230 6.46 0.09 9.73 34 TR_XM_BayesUnsub 13828 10.51 14.84 8.29 35 TR_XM_DK_Bayes 13605 5.52 0.38 8.15 36 TR_XM_DK_Bayes1 13375 5.42 0.38 8.02 37 T_TooManySym_01 12661 5.66 1.91 7.59 38 BAYES_60 12248 7.79 8.67 7.34 39 TR_XM_DK_Bayes2 11892 4.79 0.23 7.13 40 XM_H_GMP 11410 6.23 5.05 6.84 41 XMStrtUSub 11085 6.19 5.30 6.64 42 XM_B_PhoneNumber 11033 5.78 4.16 6.61 43 LotsOfNums_01 11007 6.41 6.05 6.60 44 TooManyTo_001 10873 5.58 3.77 6.52 45 RCVD_IN_VALIDITY_SAFE 10230 5.15 3.24 6.13 46 XM_H_Long_From01 10216 5.83 5.25 6.12 47 TR_MAX_INTL_RELAY 10163 9.68 16.67 6.09 48 IN_ZIMBRA_NJ_WHITELIST 9827 3.93 0.11 5.89 49 XM_B_SpammyWords3 9613 8.63 14.23 5.76 50 XM_UncommonTLD01 9355 6.03 6.85 5.61 51 LOTS_OF_MONEY 9343 7.00 9.72 5.60 52 HTML_IMAGE_RATIO_02 9166 6.50 8.45 5.49 53 XM_DK_Undo_02 8421 17.85 42.76 5.05 54 BAYES_40 8353 3.79 1.41 5.01 55 RCVD_IN_VALIDITY_CERTIFIED 8235 4.18 2.72 4.94 56 T_TooManySym_02 7834 3.24 0.40 4.70 57 HTML_IMAGE_RATIO_04 7781 4.71 4.80 4.66 58 MPART_ALT_DIFF 7752 5.19 6.25 4.65 59 RCVD_IN_MSPIKE_WL 7669 4.01 2.85 4.60 60 RCVD_IN_MSPIKE_H3 7669 4.01 2.85 4.60 61 XM_B_Phish_Phrases 7628 5.33 6.80 4.57 62 T_REMOTE_IMAGE 6847 3.26 1.62 4.10 63 BAYES_99 6806 14.29 34.17 4.08 64 XMNumbers 6736 3.42 2.22 4.04 65 INVALID_MSGID 6659 2.79 0.44 3.99 66 BAYES_80 6320 6.11 10.64 3.79 67 TO_MALFORMED 6282 2.50 0.04 3.77 68 XMSubMetaSx_00 6246 4.58 6.19 3.74 69 TR_XM_SpammyWords4 6153 5.30 8.45 3.69 70 BAYES_20 5716 2.64 1.10 3.43 71 ANY_BOUNCE_MESSAGE 5655 2.47 0.68 3.39 72 BOTNET_IPINHOSTNAME 5655 5.56 9.80 3.39 73 BOUNCE_MESSAGE 5655 2.47 0.68 3.39 74 XM_B_SpammyTLD 5365 3.19 3.14 3.22 75 BAYES_999 5250 11.00 26.28 3.15 76 XM_CamelCaseFrm001 5233 3.28 3.57 3.14 77 MIME_QP_LONG_LINE 5227 2.60 1.56 3.13 78 RELAYCOUNTRY_META 5182 7.41 15.78 3.11 79 HTML_IMAGE_RATIO_06 4686 3.21 3.99 2.81 80 MIME_HTML_MOSTLY 4630 3.52 4.97 2.78 81 MIME_HTML_ONLY_MULTI 4426 2.94 3.50 2.65 82 FROM_EXCESS_BASE64 4422 2.59 2.48 2.65 83 XM_Body_Dirty_Words 4409 4.26 7.40 2.64 84 TooManyTo_002 4275 1.85 0.46 2.56 85 T_XMDrugObfuBody_14 4270 3.30 4.73 2.56 86 HTML_IMAGE_RATIO_08 4076 2.68 3.15 2.44 87 XM_PDF 3898 1.71 0.48 2.34 88 BAYES_95 3840 3.47 5.74 2.30 89 MAILING_LIST_MULTI 3721 2.17 2.06 2.23 90 RCVD_IN_IADB_LISTED 3617 1.58 0.45 2.17 91 TR_XM_DKIM_Undo 3543 11.95 31.08 2.12 92 HTML_MIME_NO_HTML_TAG 3508 1.87 1.42 2.10 93 XMBdyGiftCard01 3450 1.63 0.79 2.07 94 T_TooManySym_03 3311 1.35 0.11 1.98 95 RCVD_IN_IADB_SPF 3269 1.43 0.41 1.96 96 IN_HORDE_ADDRESS_BOOK 3210 1.31 0.10 1.92 97 XMSexyCombo_05 3208 2.99 5.07 1.92 98 BAYES_05 3149 1.43 0.54 1.89 99 DKIM_INVALID 3020 2.57 4.04 1.81 100 RCVD_IN_IADB_SENDERID 2978 1.32 0.40 1.78 101 TM2_M_URI_OPT_OUT 2943 2.08 2.70 1.76 102 RCVD_IN_IADB_DK 2937 1.30 0.40 1.76 103 TR_XM_SpammyRelay 2855 4.91 11.13 1.71 104 TR_XM_PhishingBody 2847 2.98 5.47 1.71 105 URI_NOVOWEL 2819 1.56 1.30 1.69 106 TR_XM_UnparsRelay 2784 4.11 8.85 1.67 107 TVD_SPACE_RATIO 2720 1.17 0.26 1.63 108 UNTRUSTED_Relay 2704 2.74 4.91 1.62 109 XMStockSpam_06 2688 1.54 1.41 1.61 110 XM_B_URI_Unicode 2640 1.74 2.05 1.58 111 TR_DCC_Bayes_99 2623 9.66 25.39 1.57 112 TR_XM_SpammyWords5 2618 1.98 2.79 1.57 113 XMGappySubj_01 2618 1.17 0.38 1.57 114 TM2_M_VERY_LONG_WORD 2601 2.16 3.34 1.56 115 XM_DK_Undo_01 2599 1.48 1.34 1.56 116 URI_HEX 2437 1.48 1.52 1.46 117 XM_B_Investor 2366 2.52 4.68 1.42 118 RCVD_IN_IADB_VOUCHED 2346 0.99 0.17 1.41 119 XMDiploma_00 2273 1.82 2.71 1.36 120 T_XMDrugObfuBody_08 2239 1.77 2.59 1.34 121 XMGappySubj_02 2200 0.89 0.06 1.32 122 TR_Symld_Words 2167 1.27 1.23 1.30 123 SUBJ_ALL_CAPS 2139 1.45 1.76 1.28 124 XM_B_SpammyWords4 2075 1.52 2.05 1.24 125 XM_SendGrid 2017 1.23 1.28 1.21 126 XMHTMLBadTable_001 1942 0.99 0.66 1.16 127 XM_B_Unsub2 1900 1.33 1.69 1.14 128 TR_XM_Base64_M1 1834 0.96 0.68 1.10 129 BOTNET 1819 3.87 9.27 1.09 130 XM_B_FormFill 1777 0.71 0.01 1.07 131 TooManyTo_003 1767 0.84 0.41 1.06 132 XM_GoogleGroups 1762 0.96 0.79 1.06 133 RCVD_IN_IADB_OPTIN 1741 0.72 0.10 1.04 134 RELAYCOUNTRY_CA 1740 3.14 7.23 1.04 135 KHOP_HELO_FCRDNS 1737 1.13 1.31 1.04 136 DKIM_ADSP_CUSTOM_MED 1688 0.99 0.94 1.01 137 TVD_RCVD_IP 1679 1.02 1.03 1.01 138 SpammyFromTLD_01 1632 1.30 1.93 0.98 139 XM_B_COPY_HTML 1622 1.19 1.63 0.97 140 XMBrknScrpt_02 1552 1.34 2.15 0.93 141 HTML_TAG_BALANCE_BODY 1491 1.16 1.67 0.89 142 XM_SPF_SoftFail 1463 1.43 2.50 0.88 143 XM_B_DNDMA 1444 0.84 0.80 0.87 144 TR_XM_DK_SendGrid 1441 0.86 0.85 0.86 145 TooManyTo_004 1383 0.67 0.36 0.83 146 XM_OfRef6 1381 1.48 2.75 0.83 147 XM_UB50 1379 1.34 2.33 0.83 148 T_STY_INVIS_DIRECT 1367 0.99 1.31 0.82 149 XM_H_PHPMailer 1349 0.86 0.96 0.81 150 XMPhish30 1295 1.50 2.91 0.78 151 HELO_MISC_IP 1269 0.53 0.09 0.76 152 XMBody_95 1267 0.54 0.11 0.76 153 T_XMHurry_00 1249 1.58 3.20 0.75 154 T_TVD_MIME_NO_HEADERS 1226 0.49 0.02 0.73 155 NML_ADSP_CUSTOM_MED 1216 0.75 0.79 0.73 156 TooManyTo_005 1216 0.60 0.35 0.73 157 XMBSHREFv2 1200 0.58 0.32 0.72 158 TM2_M_OBFU_COMMENT 1193 0.89 1.22 0.72 159 XMNoVowels 1179 0.78 0.93 0.71 160 T_FILL_THIS_FORM_SHORT 1178 1.13 1.97 0.71 161 USER_IN_WHITELIST 1126 0.45 0.00 0.67 162 USER_IN_WELCOMELIST 1126 0.45 0.00 0.67 163 XMSlimDrugH 1124 0.87 1.26 0.67 164 XM_URI_RBL 1122 1.15 2.06 0.67 165 XM_ProductURIs 1098 0.74 0.90 0.66 166 XM_H_Long_From02 1076 0.80 1.10 0.64 167 XMBody_17 1070 1.29 2.56 0.64 168 TR_MetaPhish_Combo_01 1061 0.70 0.84 0.64 169 T_XMDrugObfuBody_00 1045 1.23 2.42 0.63 170 FORGED_GMAIL_RCVD 1045 0.67 0.76 0.63 171 T_TooManySym_04 1044 0.42 0.02 0.63 172 XMGenDplmaNmb 1024 0.86 1.34 0.61 173 SUBJ_DOLLARS 995 0.60 0.61 0.60 174 RCVD_IN_PBL 994 0.70 0.92 0.60 175 URI_TRY_3LD 987 0.70 0.91 0.59 176 MPART_ALT_DIFF_COUNT 975 0.79 1.19 0.58 177 MSGID_FROM_MTA_HEADER 972 0.41 0.07 0.58 178 RCVD_IN_BL_SPAMCOP_NET 955 3.06 7.89 0.57 179 XMhairloss01 909 0.49 0.39 0.54 180 HTTPS_HTTP_MISMATCH 886 0.80 1.32 0.53 181 DKIM_ADSP_NXDOMAIN 867 0.69 1.03 0.52 182 DIET_1 866 1.30 2.82 0.52 183 RELAYCOUNTRY_AU 835 1.18 2.51 0.50 184 TR_XM_SpammyWords2 828 4.43 12.08 0.50 185 LOW_PRICE 822 0.46 0.41 0.49 186 NO_DNS_FOR_FROM 805 0.61 0.85 0.48 187 XM_ShortIntro_01 804 0.44 0.36 0.48 188 AD_PREFS 801 0.36 0.12 0.48 189 XM_S_SubURI 798 0.34 0.06 0.48 190 MIME_CHARSET_FARAWAY 795 0.58 0.78 0.48 191 HTML_TAG_BALANCE_CENTER 736 0.48 0.57 0.44 192 SHOPIFY_IMG_NOT_RCVD_SFY 712 0.85 1.68 0.43 193 RDNS_DYNAMIC 706 0.66 1.12 0.42 194 XMLngstWrd_00 687 0.45 0.52 0.41 195 PLING_QUERY 673 0.55 0.84 0.40 196 XMSolicitRefs_0 670 0.48 0.62 0.40 197 XMSubMetaSxObfu_02 669 0.42 0.47 0.40 198 HTML_FONT_FACE_BAD 664 0.48 0.65 0.40 199 XMWrdNumbWrd 636 0.27 0.04 0.38 200 XMCapTrack 631 0.33 0.24 0.38 ----------------------------------------------------------------------